stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity

save checkpoint

Browse Source
This commit is contained in:
master
2026-02-11 01:32:14 +02:00
parent 5593212b41
commit cf5b72974f
2316 changed files with 68799 additions and 3808 deletions
Download Patch File Download Diff File Expand all files Collapse all files

84
docs/features/checked/plugin/plugin-sandbox.md
View File

@@ -47,3 +47,87 @@ Process-level plugin sandboxing with gRPC communication bridge for secure out-of
### Verdict
**PASS** - Plugin sandbox with process isolation verified. Untrusted plugins execute in sandboxed process with restricted capabilities via ProcessSandbox gRPC bridge. Trusted plugins run isolated with monitoring via PluginHealthMonitor. Built-in plugins run in-process with full access. Health monitoring detects unhealthy sandboxed plugins through periodic HealthCheckAsync. Process isolation with resource limits and filesystem policies prevents sandbox escape. Trust level routing in PluginHost correctly determines execution environment based on PluginHostOptions.
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Sandbox.Tests`: 47/47; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-002/tier2-integration-check.json`
- **Outcome**: Sandbox resource/trust-level behavior remains stable.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Sandbox.Tests`: 47/47; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-003/tier2-integration-check.json`
- **Outcome**: Sandbox resource/trust-level behavior remains stable.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Sandbox.Tests`: 47/47; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-004/tier2-integration-check.json`
- **Outcome**: Sandbox resource-limiter and trust-level execution checks remain healthy.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Sandbox.Tests`: 47/47; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-005/tier2-integration-check.json`
- **Outcome**: Checked plugin behavior remains healthy in follow-up replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (module matrix: 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-006/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (module matrix: 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-007/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized module matrix).
- **Tests**: PASS (Plugin matrix 314/314: Abstractions 79, Host 105, Registry 65, Sandbox 47, SDK 7, HelloWorld sample 11).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-008/tier2-integration-check.json
- **Outcome**: Checked Plugin behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized module matrix).
- **Tests**: PASS (Plugin matrix 314/314: Abstractions 79, Host 105, Registry 65, Sandbox 47, SDK 7, HelloWorld sample 11).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-009/tier2-integration-check.json
- **Outcome**: Checked Plugin behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld sample 11/11; total 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-010/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld sample 11/11; total 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-011/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d serialized plugin replay.
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld 11/11; total 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-012/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-013)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay with fresh command-output evidence.
- **Tests**: PASS (47/47; Plugin matrix 314/314: Abstractions 79, Host 105, Registry 65, Sandbox 47, SDK 7, HelloWorld sample 11.)
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-013/tier2-integration-check.json
- **Outcome**: Checked Plugin behavior remains healthy in continued replay.